matthewpierson / checkm8-nonce-setter Goto Github PK

Hi, I have decrypted most of the iPad Pro 9.7 inch firmware keys and uploaded some to iPhonewiki, but when I try to restore these versions with fr I found that fr does not set the Nonce value correctly, so I hope the tool will support A9X ,is it possible? I can provide the necessary assistance if you need it.

Device: iphone 7 plus 13.2.3 w/blobs
I get this after typing my nonce in and pressing enter and putting my phone into DFU mode. After getting in DFU mode it stays there for a bit and it says:

• checkm8 exploit by axi0mX *
• modified version by Linus Henze *
• s5l8965x support by Matthew Pierson *
  Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001A05CC1844ED26 IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
  But then soon right after this message, the phone is kicked into recovery mode and i get this:
  ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting.
  No matching processes belonging to you were found
  Waiting 10 seconds to allow you to enter DFU mode
  --
  Here's the full log:
  Cloning into 'ipwndfu_public'...
  remote: Enumerating objects: 463, done.
  remote: Total 463 (delta 0), reused 0 (delta 0), pack-reused 463
  Receiving objects: 100% (463/463), 1.87 MiB | 2.41 MiB/s, done.
  Resolving deltas: 100% (239/239), done.
  Starting ipwndfu
  No matching processes belonging to you were found
  Waiting 10 seconds to allow you to enter DFU mode
  Attempting to get into pwndfu mode
  Please just enter DFU mode again on each reboot
  The script will run ipwndfu again and again until the device is in PWNDFU mode
• checkm8 exploit by axi0mX *
• modified version by Linus Henze *
• s5l8965x support by Matthew Pierson *
  Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0A ECID:001A05CC1844ED26 IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
  ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting.
  No matching processes belonging to you were found
  Waiting 10 seconds to allow you to enter DFU mode

I have setted the nonce using it , nonce was set successfully. But on future restore it says the SEP firmware is not being signed. I unchecked the Set nonce to Blob on future . can I downgrade from 15.2.1 to 14.1 using the blobs ?

@MatthewPierson is there way to add support to iPad Pro 2016 with A9X? I looked everywhere and couldn't find a solution do downgrade my iPad.

Akayn already added the function for the iPhone X/8+/8 for loading unsigned images.
https://github.com/akayn/ipwndfu

Are you planning to add support for A8X processor? If yes, when?

Is there anything i can do to help get the nonce setter to work for the iPad Pro (10.5 Inch)?

Not necessarily an issue, just curious on what patches are used for this script to work.

Hello,
My instructions to how to downgrade iphone where
./main.sh
0x1111111111111111

If you get an error saying permission denied for igetnonce, then run:
cd files
ldid -S igetnonce
ldid -S irecovery
ldid -S lsusb
ldid -S eclipsa8000
ldid -S eclipsa8003

and then i used these commends because i got error igetnonce is broken and after trying these commends always i got error cd: to many arguments can you please fix the igetnonce. I added screenshots then maybe you understand better what is wrong.
Best wishes!

/Desktop/checkm8-nonce-setter-master$ ./main.sh
Cloning into 'ipwndfu_public'...
remote: Enumerating objects: 13, done.
remote: Counting objects: 100% (13/13), done.
remote: Compressing objects: 100% (11/11), done.
remote: Total 463 (delta 5), reused 8 (delta 2), pack-reused 450
Receiving objects: 100% (463/463), 1.88 MiB | 738.00 KiB/s, done.
Resolving deltas: 100% (235/235), done.

Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
Enter device model please
iphone 7
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
./main.sh: line 86: [: too many arguments
Your iphone 7 is not supported, sorry.
Exiting...

Hi, I have an error while using your tool with the iPad 7th gen (2019)
I know that it's available in the README but I can't get it to work
I have the following message : "ERROR: Unable to discover device model"

No biggie, but I'm opening this in case anyone else does the same thing. The command in the README states that you should be in the same folder, but it was just a little surprising that it was a requirement.

~/Unsynced documents/futurerestoring » checkm8-nonce-setter-master/main.sh
*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
checkm8-nonce-setter-master/main.sh: line 82: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 89: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 96: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 103: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 110: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 117: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 123: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 129: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 135: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 141: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 147: files/igetnonce: No such file or directory
checkm8-nonce-setter-master/main.sh: line 153: files/igetnonce: No such file or directory
Either unsupported device or no device found.
Exiting..

Throws an error « unsupported device or device not found », can’t get it to detect my iPad 2017 (5th gen wifi)
Using VM Mac OSX Mojave

Hi bro,Thank you for sharing this excellent instrument, With iPhone 5s I don't have any problems, It works well, While with iPhone X he can't send him to recovery mode. What can it be? Thanks 🙏 ( macOS Mojave version 10.14.6)

*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
Supported Device
iPhone10,6
Supported device found.
Please connect device in DFU mode. Press enter when ready to continue

Cloning into 'ipwndfu'...
remote: Enumerating objects: 432, done.
remote: Total 432 (delta 0), reused 0 (delta 0), pack-reused 432
Receiving objects: 100% (432/432), 1.90 MiB | 3.29 MiB/s, done.
Resolving deltas: 100% (217/217), done.
Starting ipwndfu
2019-11-25 19:05:12.317 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.318 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.319 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.320 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.321 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:12.322 system_profiler[33601:127409] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode
Please just enter DFU mode again on each reboot
The script will run ipwndfu again and again until the device is in PWNDFU mode
*** checkm8 exploit by axi0mX ***
Found: CPID:8015 CPRV:11 CPFM:03 SCEP:01 BDID:0E ECID:000908590498402E IBFL:3C SRTG:[iBoot-3332.0.0.1.23]
Device is now in pwned DFU Mode.
(2.92 seconds)
2019-11-25 19:05:27.552 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.552 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.553 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.553 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.554 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
2019-11-25 19:05:27.555 system_profiler[35417:130188] SPUSBDevice: IOCreatePlugInInterfaceForService failed 0xe00002be
Device is an iPhone X, using akayn's signature check remover
Heap repaired.
Bootrom Patched
you can now load unsigned firmware
and debug the next boot stages
Device is now in PWNDFU mode with signature checks removed (Thanks to Linus Henze & akayn)
Entering PWNREC mode
Entered PWNREC mode
Current nonce
NONC: a70c80fffaf615a6d7cea73fe3c337b146257617ff35b66f6d7779166fb06798
Setting nonce to 0x1111111111111111
Waiting for device to restart into recovery mode
New nonce
NONC: a70c80fffaf615a6d7cea73fe3c337b146257617ff35b66f6d7779166fb06798
We are done!

You can now futurerestore to the firmware that this SHSH is vaild for
Assuming that signed SEP and Baseband are compatible
MacBook-Pro:checkm8-nonce-setter-master salvatoredebari$

iPad 6th Gen is apparently not supported.............

When trying to input a generator value and hitting enter it outputs this:

*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
Either unsupported device or no device found.
Exiting..

Would there be a way to fix that?

Why its taking too much time in arrive exploits like checkra1n and also checkm8-nonce-setter to iPad Air 2 than other devices? Ty

Can this be updated to Python3 already? Come on now! :)

This error repeats itself hundreds of times, I've had no success over the past few days.

Starting ipwndfu
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode
Please just enter DFU mode again on each reboot
The script will run ipwndfu again and again until the device is in PWNDFU mode
*** checkm8 exploit by axi0mX ***
*** modified version by Linus Henze ***
*** s5l8965x support by Matthew Pierson ***
Found: CPID:8010 CPRV:11 CPFM:03 SCEP:01 BDID:0C ECID:00022859389B8D26 IBFL:3C SRTG:[iBoot-2696.0.0.1.33]
ERROR: No Apple device in DFU Mode 0x1227 detected after 5.00 second timeout. Exiting.
No matching processes belonging to you were found
Waiting 10 seconds to allow you to enter DFU mode
Attempting to get into pwndfu mode

ipwndfu works first try (iPhone 7), it seems Linus's modified version makes it very unstable, you should make a version with the original.

@DaemonJWS - Twitter.

Can you add 6s please :( 🙏🙏🙏🙏

Hello, brother, my macbook 10.14.6，phone:x 13.4，after I installed mojave security update 2020-002, I couldn't fix the g value, and it kept showing "Either unsupported device or no device found", and I reinstalled the system and did not install the 2020-002 update , Normal use, is there any solution?

Well theres nothing much to say here other than the iPad 7th Gen doesn't work. When trying to input a generator value and hitting enter it outputs this:

*** Matty's Checkm8 APNonce Setter ***
Do you want to input a generator? (y,n)
y
Please enter your desiered generator.
0x1111111111111111
Your generator is 0x1111111111111111
0x1111111111111111
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
ERROR: Unable to discover device model
Either unsupported device or no device found.
Exiting..

Would there be a way to fix that?

Hi, I have an iPhone 6 and i would like to help you to add support for it.
Tell me how i could help/test

Either unsupported device or no device found.
Exiting..

why do i get this error after i put the generator key?

Can you guys add Iphone 8 badly needed, I can't use my iphone 8 now because of the update (IOS15) and I can't use my phone now and I think downgrading is the only way to use it. 😢

Hello :)

Are you planning to add support for A8X

thanks

Please add support for iPhone SE

Keep getting this error

"ERROR: Exploit failed. Device did not enter pwned DFU Mode.
No matching processes belonging to you were found"

iPhone X - macOS Catalina 10.15.7 (AMD Ryzentosh via OpenCore bootloader)